High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-18	CVE-2023-39509	Command Injection vulnerability in Bosch Cpp13 Firmware and Cpp14 Firmware A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera. network low complexity bosch CWE-77	7.2
2021-08-05	CVE-2021-23849	Cross-Site Request Forgery (CSRF) vulnerability in Bosch products A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). network low complexity bosch CWE-352	8.8